Senior Privacy and Security Manager

About The Job

With the widespread impact of AI technologies, the growth of our products, and the proliferation of new and at times fragmented laws and reporting requirements, Google faces one of the most exciting and challenging moments as a company. The Risk, Compliance, and Integrity organization brings together critical compliance, assurance, risk, and governance functions across Google to help the company meet compliance needs and enable our businesses to innovate. Our goal is to make compliance an engaged advantage for Google by driving scaled, data-driven, and policy-based compliance programs. We manage our operations through risk-based prioritization and governance, and consistent and constructive regulator engagement.

As a Senior Privacy and Security Manager, you will lead and elevate our compliance program. You will have an understanding of compliance frameworks, risk assessment, and internal controls, coupled with the ability to collaborate effectively across the organization and influence at all levels with respect to privacy and security areas of law. You will be a strategic thinker with exceptional communication skills and will utilize experience building and managing compliance programs. Additionally, you will utilize your ability to track, report on, and effectively manage compliance initiatives from inception to completion including defining clear objectives, establishing metrics, monitoring progress, and ensuring timely and accurate reporting to stakeholders.

Responsibilities

• Lead, architect, and implement an end-to-end compliance and risk management program tailored to the organization's specific needs and regulatory environment.
• Develop a set of clear, quantifiable metrics and key performance indicators (KPIs) to objectively measure and track the program's effectiveness and identify areas for improvement.
• Advocate for your programs, effectively communicate program status and impact to executive stakeholders, and ensure alignment on strategic objectives.
• Enhance awareness of complex compliance requirements and best practices, translating insights into recommendations and strategic initiatives.
• Conduct risk assessments, identify potential compliance gaps, and develop and implement mitigation plans.
• Design and implement sophisticated control frameworks to ensure ongoing compliance with evolving regulatory landscapes and company policies.

Minimum qualifications:

• Bachelor's degree or equivalent practical experience.
• 10 years of experience in privacy compliance, risk management, investigation, auditing, legal, or consulting.
• Experience with enterprise-wide/cross-functional project planning and execution.

Preferred qualifications:

• Advanced degree in a relevant field (e.g., law, business, compliance) or a recognized compliance certification.
• Experience in bringing structure and clarity to complex and ambiguous situations with excellent problem-solving skills.
• Experience managing complicated workstreams and teams.
• Understanding of compliance program management principles, risk assessment methodologies, and internal control frameworks.
• Ability to collaborate effectively with cross-functional teams, executive management, regulators, and external stakeholders.
• Ability to focus on identifying potential risks and developing solutions to ensure ongoing compliance and mitigate potential issues.

Key skills/competency

• Privacy Compliance
• Risk Management
• Security Compliance
• Regulatory Governance
• Internal Controls
• Program Leadership
• Stakeholder Engagement
• Project Execution
• AI Ethics
• Data Protection Laws